Ayo Agunbiade CISSP, CCSP, CCSK, CISM, CSSLP, PMP

CISA has been releasing advisories on Industrial Control System security issues, vulnerabilities, and exploits for years, but the volume of advisories has sharply increased in the last two years. Three years ago a typical CISA advisory on Industrial Control Systems had one to five advisories. Today, I see a lot more bulletins with advisories numbering 20, 25, or even as high as 30+. This is a signal that the ICS/OT community is doing more. OEMs, software providers, integrators, services companies, and critical infrastructure operators are all doing more to protect the critical systems that support our modern way of life and identifying more of these vulnerabilities. Your electrical grid, water system, connected transportation networks, telecommunications infrastructure, and more, are all connected and carry risk just like any network. CISA plays a vital role in distributing these advisories. Sign up and subscribe to their updates at the link below and keep up the great work team. https://lnkd.in/gSMNnVRB

32

Remediation vs. Mitigation: Two Sides of the Same Coin Remediation and mitigation play vital roles in addressing security gaps within organizations. While remediation tackles issues at their root within the supplier's security controls, mitigation steps in to address gaps left unattended by vendors. Leveraging threat intelligence can empower security teams with external data feeds, offering detailed insights into attack vectors and malicious actors' intentions. These inputs are invaluable for prioritizing and focusing remediation and mitigation efforts effectively. #Remediation #Mitigation #Cybersecurity #ThreatIntelligence

3

🔒 MITRE Continues to Innovate with the EMB3D™ Threat Model! 🔒 MITRE impresses continues to establishing a common language for device vendors, asset owners, and researchers to analyze embedded device threats effectively. The EMB3D Threat Model links specific cyber threats to device properties and provides mitigations mapped to IEC 62443 controls, enabling clear, actionable strategies to secure critical infrastructure. With EMB3D, organizations can tailor threat models, prioritize risks, and boost resilience across industrial systems. #Cybersecurity #CriticalInfrastructure #IEC62443 #EmbeddedDevices #MITRE https://emb3d.mitre.org/

4

We can all agree that we need to focus on the mental health of our teams - SOC analysts in particular have a high stress job. It is something I'm particularly focused on with MM-ISAC and our member companies. Imagine my excitement when I saw this article from The Hacker News: https://lnkd.in/g9iqBVeJ That excitement turned quickly to disappointment when I read it and saw it was nothing more that an advertisement for yet another AI SOC. In fact, I wonder if AI wrote the article. While the highlighted steps are good, the solutions are either nothing more than "Buy my product" or counterproductive to the problem they point out. For example, under work life balance - the suggestion is, rather than 24/7 staff, use their product to send alerts to your existing staff over Slack, Teams, Email... awesome - way better than work a night shift is to work a day shift and be constantly connected and bombarded with alerts all night. That will help reduce burnout and improve balance for sure! If you want to tackle important, systemic problems like responder burnout, please do - but don't do it in an ad disguised as a helpful article, and provide actionable guidance that will help, not double down on the problem. Please. Do better. #mentalhealth #burnout #badadvertising #cybersecurity #soc

8

1 Comment

Aligning cybersecurity strategies with a company’s risk tolerance is important for effective risk management. This process involves understanding the organization's unique risk profile, setting clear priorities, and ensuring that cybersecurity efforts are proportional to the risks faced. It’s essential to engage with stakeholders across the firm to build a shared understanding of acceptable risk levels and to make informed decisions that balance security with business objectives. #Cybersecurity #RiskManagement #BusinessStrategy

21

1 Comment

🚨Understanding Your CMMC 2.0 Maturity Level and Identifying Gaps⚠️ As the Q1 2025 #mandate for CMMC 2.0 draws closer, is your organization fully prepared? The first step in meeting #CMMC2 requirements is conducting a detailed assessment of your cybersecurity maturity. It’s not just about what tools you have, but about how mature your processes are across key areas like access control, incident response, and audit logging. Ask yourself: 🔍Do you have the right security controls in place to protect Controlled Unclassified Information (#CUI)? 📏Are there gaps between your current practices and the #requirements at your desired maturity level? 📃Performing a maturity level #assessment now will help you understand your #gaps and take action before it’s too late. At Concertium we specialize in meeting organizations where they are and helping them bridge those gaps efficiently. Reach out today for a FREE CMMC consultation to understand what your journey will look like and how to prepare for a successful outcome www.concertium.com. #CMMC #Cybersecurity #Compliance #MaturityLevel #RiskManagement

7

1 Comment

Creative ways to use AI for ISO 27001 I've observed: 1. Internal audit preparation 2. Guidance for implementing a control 3. Transitioning from 2013 to 2022 controls 4. Tailored policy writing 5. Checking for blind spots I especially love the last one—it's tough to catch everything, so using AI to spot anything missed after tasks like risk assessments or audits is very helpful. Important: AI is a great tool, but human expertise is irreplaceable. Instead of spending millions replacing experts, we should empower them. Such use cases go in the direction. What other AI use cases do you see benefiting ISO professionals? #iso27001 #lifeafteriso27001

16

2 Comments

🚨 Security Lessons from the Canada Revenue Agency Tax Fraud Incident 🚨 The Canada Revenue Agency (CRA) recently faced a massive fraud scheme, with hackers exploiting H&R Block credentials to siphon over $6 million via fraudulent tax returns. This incident highlights the importance of robust security measures for taxpayer data. 🔑 Key Takeaways: 1. Multi-layered Identity Verification: CRA’s “pay now, verify later” approach exposes vulnerabilities. Implementing stronger, preemptive verification steps can help reduce fraudulent claims. 2. Enhanced Coordination with Banks: Sharing real-time information about flagged accounts with financial institutions can help prevent unauthorized transfers. 3. Public Transparency: Disclosing breaches promptly builds trust and enables individuals to take protective actions, such as monitoring for fraud. Strengthening data protection for taxpayer accounts is essential to prevent financial fraud. #Cybersecurity #DataProtection #TaxFraud #CanadaRevenueAgency #FinancialSecurity https://lnkd.in/e4jeNrWR

1

Cipp/с : new OPC investigation Privacy Commissioner Investigates CRA Data Breach Impacting 30,000 Individuals Privacy Commissioner Philippe Dufresne has launched an investigation into the Canada Revenue Agency (CRA) following a cyberattack that compromised personal data of over 30,000 individuals since 2020. This inquiry will assess whether the CRA upheld its obligations under Canada’s Privacy Act for federal institutions. 🔍 Previous breaches in sectors handling sensitive financial and personal data—like the Desjardins and Capital One cases—highlighted critical weaknesses in cybersecurity and vendor management. Both companies faced extensive scrutiny for failing to implement sufficient security measures. Unlike private companies, however, federal bodies like the CRA operate under additional Treasury Board directives for breach reporting and public accountability, adding layers of oversight. In this case, the CRA’s response will be pivotal, setting a standard for other government agencies managing vast amounts of sensitive information. This investigation signals that even federal institutions must maintain robust data protections comparable to private-sector standards. Those potentially impacted should check their CRA accounts for unusual activity, update passwords, and contact the CRA if they have concerns. With cyber threats targeting both public and private sectors, strong data protection and transparent incident response are more essential than ever. This month, I’m thrilled to offer something my courses have never had before: exclusive live online sessions! 🎉 For each course, you’ll receive **one free live masterclass** designed to help you excel. How can you join? Simply enroll today, and you’ll get access to the live session happening on the last weekend of the month. This gives you the perfect opportunity to absorb the lectures, prepare your questions, and engage directly with me during the session. Don’t miss out on this chance to enhance your learning experience! Sign up now and get ready to elevate your skills! 🚀✨ 1. CIPP/e Author prep with discount : https://lnkd.in/evueyaiQ or CODE: C2AE544B225EBF67E838 2. For Cipp/A (Asia) Author Prep with % : https://lnkd.in/e8QrXEzJ CODE: D9EB64EDB73648410004 3. For CIPP/US Author Prep with %: https://lnkd.in/eKckPbDG CODE: 6CCABC5D3F99C4C7C031 4. For CIPP/C (canada)Author Prep with %: https://lnkd.in/eV9Cv2Sw or CODE: B7956F5D686390F6CFE2 5. AIGP Prep Course": https://lnkd.in/eVVsRxW6 or CODE: E6D173C0B4512059B5D5 #DataPrivacy #Canada #CRABreach #OPC #cybersecurity #cippe #cippc #cippa #cippus #aigp

3

CISA and FBI release draft guidance on Product Security Bad Practices for software manufacturers The CISA-FBI guidance outlines software manufacturers to avoid these product security bad practices. By following the recommendations in this guidance, manufacturers will signal to customers that they are taking ownership of customer security outcomes, a key Secure by Design principle. https://lnkd.in/gb3DgATY

4

Cybersecurity & Data Privacy Assessment Standards (CDPAS) The Cybersecurity & Data Privacy Assessment Standards (CDPAS), published by the Secure Controls Framework Council (SCF Council), outlines essential standards for conducting third-party assessments in cybersecurity and data privacy. This 2024 version emphasizes the importance of professional conduct, integrity, and independence for assessors. It establishes guidelines for secure practices, including the need for formal agreements such as Statements of Work (SOW) and Data Protection Impact Assessments (DPIAs). The Cybersecurity & Data Privacy Assessment Standards (CDPAS) aims to standardize assessment practices, ensuring that organizations can effectively evaluate and enhance their cybersecurity and data privacy controls. This document serves as a crucial resource for organizations seeking assessment, third-party assessment organizations, and other stakeholders in the assessment ecosystem. Ibrahim

43

3 Comments

What do you think? If a Pentest or other Pentest tools /EDR info/data are not used to Identify risks as part of an Internal or external audit or risk assessment; 🙈 Would you be comfortable providing a Risk assessment report lacking this info?😱 Does your company use these as inputs? SpecterOps tools? Or methods from Hacking Articles , NCC Group ScouteSuite for multi-cloud auditing, And Center for Internet Security Controls to ask for proof of such controls as routine/Emergency Patching?👀

2

3 Comments